General
- Target 2026-08-20_ffcc49c4ecfb080d94ca6176c0c601c7_elex_wannacry
- Size 20KB
- Sample260820-yqzrwavanf
- SHA256 3155d3423b12ef00d812880671a0800595d30265fdc8e1c26110292d259902dc
- MD5 ffcc49c4ecfb080d94ca6176c0c601c7
- SHA1 52e3920ee4618bab1ea0230681af76adfc56da98
- SHA512 565ce50706812640d81cc8b16d69e4e267b75206dc320617d04c3ed206867741d306514b82114fcc8d68e8cc2f57a91648234fa66c5df31c3e683dfdc5533d9d
- SSDEEP 384:uTQWckBeEd6ml1pcg7F3Gih1uTRTcljilermJiMiA2r7t:uxckEEd62J7F3Gih1uTRTcljilViM8rh
- TLSH T1B69241395FE41DB3E3B7D6B685F7C1C6A830B4273A03591E40861B891C23F12ADA1B9D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-20_ffcc49c4ecfb080d94ca6176c0c601c7_elex_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_ffcc49c4ecfb080d94ca6176c0c601c7_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_ffcc49c4ecfb080d94ca6176c0c601c7_elex_wannacry
- Size 20KB
- SHA256 3155d3423b12ef00d812880671a0800595d30265fdc8e1c26110292d259902dc
- MD5 ffcc49c4ecfb080d94ca6176c0c601c7
- SHA1 52e3920ee4618bab1ea0230681af76adfc56da98
- SHA512 565ce50706812640d81cc8b16d69e4e267b75206dc320617d04c3ed206867741d306514b82114fcc8d68e8cc2f57a91648234fa66c5df31c3e683dfdc5533d9d
- SSDEEP 384:uTQWckBeEd6ml1pcg7F3Gih1uTRTcljilermJiMiA2r7t:uxckEEd62J7F3Gih1uTRTcljilViM8rh
- TLSH T1B69241395FE41DB3E3B7D6B685F7C1C6A830B4273A03591E40861B891C23F12ADA1B9D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Waski payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE